Invoke-PnPTenantTemplate Permissions Needed

[dcashpeterson]

Hi all, I am wondering what permissions the app registration needs by default for Invoke-PnPTenantTemplate to instantiate a template. Can anyone articulate that?

[gautamdsheth]

Hey @dcashpeterson , it depends on the template and what you are provisioning.

If you are provisioning , standard SharePoint sites like classic sites, comm sites or team sites without group, SP admin permissions would be enough.
If you are creating Teams, you need to have permissions to create Teams.
If Team sites backed by M365 group, then permissions to create Groups and SP sites.
If you are provisioning Entra ID Users, then permissions to create Users
If you are creating Group policies, then permissions to create Group settings.

[dcashpeterson]

Thank you. I have a template for Learning Pathways. I didn't create it but need to specify the permissions someone needs to install it so I will figure it out. Thanks!